Lucene search
+L

3 matches found

OSV
OSV
added 2026/09/04 5:54 p.m.2 views

CVE-2026-53760 Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests

Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installation, uninstallation, and update operations via GET requests without CSRF token validation. Because these are top-level navigations, browsers include...

5.2CVSS5.8AI score
SaveExploits0References4
Rows per page
Query Builder